Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
File: L708fpx3-aiJSQVlDX9aQ5oHJl0.mft (raw, json)
Hash identifier: BlsdGupsjx6HXC8NmS9Gl8ieyGDgwUalSETK8IG3L9A=
Subject key identifier: BB:C3:87:8B:99:EC:66:FC:37:52:3F:D1:6E:D5:10:AE:F1:D1:E1:D4
Authority key identifier: 2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
Certificate issuer: /CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Certificate serial: 0198726242DF9C0E952E984E3E0A496249D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
Manifest number: 0C71
Signing time: Mon 04 Aug 2025 00:01:38 +0000
Manifest this update: Mon 04 Aug 2025 00:01:38 +0000
Manifest next update: Tue 05 Aug 2025 00:01:38 +0000
Files and hashes: 1: L708fpx3-aiJSQVlDX9aQ5oHJl0.crl (hash: u6iTgd22HFTUvXq+huZ5GkTywiRfGGQiy50uDh/yBgM=)
2: poxmGDjmFhEykYFtUrK86QVNSBE.roa (hash: LiFoIRCZoOCJ6MEjwTK5FSST0U+wUgy2+UPXqJfWuqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:62:42:df:9c:0e:95:2e:98:4e:3e:0a:49:62:49:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Validity
Not Before: Aug 4 00:01:38 2025 GMT
Not After : Aug 5 00:01:38 2025 GMT
Subject: CN=bbc3878b99ec66fc37523fd16ed510aef1d1e1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:a2:af:4a:5a:cd:5f:f4:50:00:12:22:26:
6f:c3:ea:6b:eb:d5:32:3d:c6:3b:47:c4:6a:8b:70:
56:e1:19:58:fb:da:d7:03:38:23:22:f4:ee:c2:83:
eb:b7:ab:ac:5c:23:2b:fb:c7:ac:04:68:ad:88:07:
ce:1e:5a:37:a2:34:c7:78:ed:f0:29:c5:36:66:d7:
7a:3c:8b:f3:db:09:10:87:89:46:12:19:a9:ea:64:
03:5c:65:6e:15:27:59:8d:b2:f5:aa:d0:65:80:5c:
10:7f:40:6f:ce:49:25:a8:4d:98:e9:cd:b1:eb:5d:
34:62:5d:03:b5:7c:4b:fb:54:09:77:38:d2:3a:bc:
a1:e8:ca:65:a4:bc:fd:77:2e:9b:c1:9e:37:9c:a4:
8c:7f:7e:6d:89:43:05:55:b1:0d:6e:d0:bd:b1:1f:
38:05:a5:53:17:f7:f7:b3:ff:89:1b:c5:59:0a:ec:
f2:67:b1:c2:cc:18:94:1a:1e:5e:23:8a:f0:26:63:
0e:83:d9:34:3d:65:de:b9:5e:40:f6:25:11:dd:d8:
b8:ff:e0:64:5d:42:96:4f:52:39:2f:8b:9a:51:6d:
1b:d1:47:24:11:17:c8:07:47:6c:12:08:a4:fe:1c:
c7:e8:cc:53:3b:50:bc:3f:72:5f:75:20:a9:bd:5b:
10:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C3:87:8B:99:EC:66:FC:37:52:3F:D1:6E:D5:10:AE:F1:D1:E1:D4
X509v3 Authority Key Identifier:
keyid:2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:43:74:07:be:58:e7:b3:32:6b:ac:6d:cd:9d:83:35:a6:c4:
73:fb:61:d3:30:e6:c1:86:28:2a:46:48:74:16:67:c0:d4:6a:
d0:d4:46:f7:98:79:38:7b:80:70:25:b8:1e:1b:9a:9f:5b:79:
0c:49:56:f0:d0:47:e0:51:62:65:2d:dd:7c:5b:37:5b:8e:8c:
e8:d0:95:47:39:ec:89:d6:a0:1f:30:87:08:79:e3:65:80:54:
05:62:75:05:58:b7:05:d2:d1:a6:d6:aa:14:6b:2f:17:62:6f:
3b:db:79:46:d3:d3:bf:59:f6:a9:b8:94:c3:3d:ce:44:b5:27:
59:38:eb:c7:c4:fa:e6:48:5f:8f:8f:7b:7e:98:4a:44:15:4c:
eb:87:4f:ea:38:3b:e6:87:26:b8:50:a3:20:3b:bb:14:d9:c2:
b1:bb:26:b9:68:7e:1c:88:f7:e7:bc:41:81:8d:9f:f4:ad:96:
d8:e0:61:2e:c8:9b:45:e2:61:77:01:9e:c5:2c:58:82:fb:24:
9a:77:63:79:17:b6:65:9f:53:b4:2a:19:82:9c:31:f3:6b:ec:
6d:c4:dd:ac:77:d1:b0:ad:63:2e:48:ca:67:57:56:12:0b:0b:
ff:88:77:f4:09:06:e4:88:0b:cf:48:35:2e:4e:54:3a:46:c9:
e2:3b:da:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:43 2025 by rpki-client